Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File:                     PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier:          brXvrpYFRAd9pu8V9EgjXywyEAjPNfOI6AVMySDYijw=
Subject key identifier:   DA:4D:AA:88:F2:C0:ED:8D:22:2D:77:52:1A:7D:E5:96:BA:0F:2F:0F
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer:       /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial:       01962E989B4973DEB272AB5E700DA3E46CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: +cUBWtkFIQTGH+aCOlmMONC8XAtgiPiQQwzfl1H9c7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:49:73:de:b2:72:ab:5e:70:0d:a3:e4:6c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=da4daa88f2c0ed8d222d77521a7de596ba0f2f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:a5:9f:37:30:37:6f:d2:22:a8:20:e6:14:
                    ff:83:e1:00:db:87:a2:4a:3e:25:58:f6:f8:b7:51:
                    b2:65:94:5a:62:df:ef:3d:ee:dd:98:42:30:17:a0:
                    c2:c6:ea:ae:36:9d:cd:14:f3:5c:97:89:db:50:80:
                    e3:ab:ab:53:cd:7f:18:f8:6d:b3:58:29:3a:51:b6:
                    84:69:48:58:03:1c:7e:1e:71:34:5a:45:ff:94:9f:
                    9b:93:49:ea:04:c1:47:18:91:8b:fb:5f:9c:f1:f6:
                    73:d7:99:0b:0f:f6:78:77:68:7d:06:93:c7:b4:69:
                    d5:d0:0f:5e:b3:92:87:9c:94:18:62:c0:83:50:d6:
                    5b:3e:74:00:1a:3e:17:ad:f3:e5:7f:57:df:de:e8:
                    6c:5d:27:0b:c5:52:9a:24:d6:29:e2:8b:d2:d6:61:
                    57:98:68:39:0b:1a:43:82:5b:ca:de:cb:35:45:e2:
                    15:a0:4a:33:2e:34:84:47:ab:ee:9c:f9:e7:48:ea:
                    b1:b8:54:fc:86:e9:a4:ff:10:07:fa:28:3d:85:49:
                    67:fb:ca:86:c7:22:27:07:45:ea:cf:24:04:70:0f:
                    11:40:6d:5b:27:2b:7d:41:0b:e9:01:2b:a8:5c:32:
                    43:a7:a0:2c:84:c6:f3:2e:17:c0:17:37:bc:f1:65:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:AA:88:F2:C0:ED:8D:22:2D:77:52:1A:7D:E5:96:BA:0F:2F:0F
            X509v3 Authority Key Identifier:
                keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:b7:68:ce:4c:53:a4:ad:47:42:57:c2:dc:62:ed:65:64:
         2c:64:0c:e7:bc:ee:18:81:94:4d:aa:70:a5:77:9d:52:d6:8c:
         78:05:58:ed:fb:82:8a:42:ae:a0:5d:52:6c:53:b2:bc:d0:01:
         d5:8b:f9:4f:75:1e:74:7e:a3:40:1e:db:c1:71:e8:4a:8b:5c:
         90:e6:f6:14:a2:5e:5c:87:46:f0:d2:fa:70:98:3f:98:96:2a:
         22:1d:24:0b:b3:8e:8b:26:c1:2e:34:ad:4b:71:f1:32:74:79:
         4b:19:8f:c8:c4:1f:6e:03:2a:fe:33:cc:5f:60:e5:c9:20:0c:
         7c:71:f7:1a:33:b8:dc:4f:2e:39:1d:8b:61:2c:cb:5b:24:d2:
         19:cc:1e:f9:67:e1:cf:69:b6:af:73:cf:a2:19:5a:5c:2b:be:
         1e:a1:a6:0e:e6:73:a3:1f:d2:e8:e4:b9:1f:88:0d:5b:0c:a3:
         92:98:c8:01:53:ce:54:31:e5:28:79:fd:e8:40:a0:3b:f5:75:
         e2:c8:99:e7:8a:cc:f4:da:79:97:3f:ee:eb:39:cf:f4:28:59:
         06:24:f4:17:b7:48:32:58:48:a1:e3:3f:ce:84:39:80:12:a6:
         9d:fd:20:d1:ec:a0:69:2e:b7:b3:0a:f1:7e:88:91:db:c5:d6:
         61:24:62:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJtJc96ycqtecA2j5GzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5
NjJjZWYwHhcNMjUwNDEzMTAwMTE1WhcNMjUwNDE0MTAwMTE1WjAzMTEwLwYDVQQD
EyhkYTRkYWE4OGYyYzBlZDhkMjIyZDc3NTIxYTdkZTU5NmJhMGYyZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0elnzcwN2/SIqgg5hT/g+EA24ei
Sj4lWPb4t1GyZZRaYt/vPe7dmEIwF6DCxuquNp3NFPNcl4nbUIDjq6tTzX8Y+G2z
WCk6UbaEaUhYAxx+HnE0WkX/lJ+bk0nqBMFHGJGL+1+c8fZz15kLD/Z4d2h9BpPH
tGnV0A9es5KHnJQYYsCDUNZbPnQAGj4XrfPlf1ff3uhsXScLxVKaJNYp4ovS1mFX
mGg5CxpDglvK3ss1ReIVoEozLjSER6vunPnnSOqxuFT8humk/xAH+ig9hUln+8qG
xyInB0XqzyQEcA8RQG1bJyt9QQvpASuoXDJDp6AshMbzLhfAFze88WVXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpNqojywO2NIi13Uhp95Za6Dy8PMB8GA1UdIwQY
MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt
MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi
LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhS3aM5M
U6StR0JXwtxi7WVkLGQM57zuGIGUTapwpXedUtaMeAVY7fuCikKuoF1SbFOyvNAB
1Yv5T3UedH6jQB7bwXHoSotckOb2FKJeXIdG8NL6cJg/mJYqIh0kC7OOiybBLjSt
S3HxMnR5SxmPyMQfbgMq/jPMX2DlySAMfHH3GjO43E8uOR2LYSzLWyTSGcwe+Wfh
z2m2r3PPohlaXCu+HqGmDuZzox/S6OS5H4gNWwyjkpjIAVPOVDHlKHn96ECgO/V1
4siZ54rM9Np5lz/u6znP9ChZBiT0F7dIMlhIoeM/zoQ5gBKmnf0g0eygaS63swrx
foiR28XWYSRijg==
-----END CERTIFICATE-----